Thecus N4800Eco Nas Server Control Panel - Command Injection
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 1.8%
probabilidade de exploração
1.8%top 22% das CVEs
exploração observada
nãonenhuma fonte reporta
Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands with administrative privileges.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
Thecus · Thecus N4800Eco Nas Server Control PanelReferências
https://docs.unsafe-inline.com/0day/thecus-n4800eco-nas-server-control-panel-comand-injectionhttps://www.exploit-db.com/exploits/49926https://www.vulncheck.com/advisories/thecus-neco-nas-server-control-panel-command-injectionhttp://www.thecus.com/http://www.thecus.com/product.php?PROD_ID=83